vox88 Privacy Policy

The following definitions apply throughout this Privacy Policy.

vox88 is an internationally operated online betting and gaming platform accessible at https://vox88.pro. The platform offers sports betting, live casino, slot games, and specialty betting products to adult members in Indonesia and select international markets. vox88 operates under an international gaming licence and is committed to maintaining the highest standards of data protection, platform security, and responsible gaming.

As the Data Controller, vox88 determines the purposes for which your personal data is processed and is accountable for ensuring that processing is conducted lawfully, fairly, and transparently. All questions and requests relating to the processing of your personal data should be directed to our Privacy team at the contact details provided in Section 16 of this Policy.

vox88 collects personal data across several categories depending on how you interact with the platform. The table below provides a structured overview of the data categories we collect and representative examples within each category.

We do not collect or process special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where strictly necessary for responsible gaming compliance (for example, where a member discloses a gambling addiction in the context of a self-exclusion request, that disclosure is processed with explicit consent and for that purpose only).

vox88 collects personal data through the following channels:

• Direct submission: Data you actively provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account settings.
• Automated collection: Technical and behavioural data collected automatically through cookies, log files, and tracking technologies when you access or use the vox88 platform. See Section 10 for full details on cookies.
• Third-party sources: Identity and fraud-screening data received from our KYC verification partners (such as document verification services and sanctions screening providers) in connection with the identity verification process. We may also receive updated contact or address information from payment processors where you have authorised them to share such data.
• Payment providers: Transaction confirmation data and payment status data from BCA, BRI, BNI, Mandiri, CIMB Niaga, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja in connection with deposit and withdrawal processing.

vox88 processes your personal data only for defined, legitimate purposes. For each purpose, we identify the applicable legal basis for processing below.

Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal. Withdrawal of consent can be effected via the communication preferences section of your account settings or by contacting vox88 support.

vox88 does not sell your personal data. We share personal data with third parties only in the following defined circumstances, and only to the minimum extent necessary for the stated purpose.

• Payment processors: Financial data is shared with our payment processing partners (including Indonesian bank payment gateways and e-wallet operators such as OVO, DANA, GoPay, ShopeePay, and LinkAja) to execute deposits and withdrawals. These partners act as independent data controllers with respect to your payment data and are subject to their own privacy policies and financial regulatory obligations.
• KYC and identity verification providers: Identity and verification data is shared with our appointed KYC service providers for the purpose of identity verification, age verification, and sanctions screening. These providers act as Data Processors under binding data processing agreements.
• Fraud prevention and AML screening services: Transaction and technical data may be shared with specialist fraud detection and anti-money laundering screening services to fulfil our legal obligations under applicable AML frameworks.
• Game content providers: Where you play games provided by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Pocket Games Soft), limited technical data (session tokens, game round identifiers) is passed to those providers to enable gameplay. These providers do not receive your identity or financial data.
• Cloud infrastructure and hosting providers: Personal data is stored on secure cloud infrastructure operated by our hosting provider(s). These providers act as Data Processors and have no independent right to use your data.
• Legal and regulatory authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are required to do so by applicable law or by a binding legal order.
• Business transfers: In the event of a merger, acquisition, or sale of all or a material part of vox88's business assets, personal data held by vox88 may be transferred to the acquiring entity. Affected members will be notified in advance where feasible, and the acquiring entity will be required to honour this Policy or provide members with a revised policy before any change in processing takes effect.

vox88 operates internationally, and your personal data may be transferred to, stored in, or processed in countries outside Indonesia. Where such transfers occur, vox88 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Policy.

Safeguards we rely on for international transfers include:

• Standard contractual clauses (SCCs) or equivalent contractual protections incorporated into our agreements with Data Processors located outside Indonesia.
• Transfer to jurisdictions that maintain adequately equivalent data protection standards to those applicable in Indonesia.
• Binding corporate rules where transfers occur within a corporate group subject to group-wide data protection policies.

For further information on the specific safeguards applicable to any international transfer of your personal data, please contact the vox88 Privacy team using the details in Section 16.

vox88 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

Where personal data is no longer required for its original purpose and no legal obligation requires its continued retention, vox88 will securely delete or anonymise the data. Anonymised data (from which all identifying elements have been irreversibly removed) may be retained indefinitely for aggregate analytical purposes and is no longer subject to this Policy.

vox88 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• TLS 1.3 encryption in transit: All data transmitted between your device and the vox88 platform is encrypted using Transport Layer Security (TLS) 1.3, the current industry standard for secure web communications.
• Encryption at rest: Personal data stored in vox88 databases is encrypted at rest using AES-256 encryption. Sensitive fields (such as KTP numbers and bank account details) are subject to additional field-level encryption.
• Access controls: Access to personal data is restricted to vox88 personnel and Data Processors who require it to perform their specific role. Role-based access control (RBAC) is enforced across all internal systems. All privileged access is subject to multi-factor authentication.
• Penetration testing and security audits: The vox88 platform undergoes regular independent penetration testing and security audits by qualified third-party security professionals. Critical findings are remediated on a defined timeline.
• Intrusion detection: vox88 operates 24/7 intrusion detection and monitoring systems across its platform infrastructure. Anomalous activity triggers automated alerts and is investigated promptly.
• Staff training: All vox88 personnel with access to personal data receive mandatory data protection training at onboarding and annually thereafter. Data handling procedures are documented and enforced through internal policy.

While vox88 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of data transmitted over the internet. Members are encouraged to use strong, unique passwords and to enable two-factor authentication on their vox88 accounts.

vox88 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, detect fraud, and analyse platform usage. The following categories of cookies are used on the vox88 platform:

• Strictly necessary cookies: Required for the platform to function. These include session management cookies that keep you logged in during your visit, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as your selected language settings, preferred deposit method, and responsible gaming tool configurations. Disabling these cookies may reduce the personalised experience but will not prevent platform use.
• Analytics cookies: Used to collect aggregated data about how members use the platform — which pages are visited, which games are played, and how members navigate between sections. This data informs product improvement decisions and is processed on the basis of vox88's legitimate interest in improving the platform.
• Security and fraud prevention cookies: Used to identify and prevent fraudulent account activity, including the detection of bot behaviour, credential stuffing attacks, and account takeover attempts.

Most web browsers allow you to manage cookies through their settings. You can configure your browser to refuse all cookies, accept only certain types, or delete existing cookies. Be aware that disabling strictly necessary cookies will impair your ability to use the vox88 platform. Instructions for managing cookies in common browsers are available in each browser's help documentation.

As a vox88 member, you have the following rights with respect to your personal data. These rights are exercisable at any time by contacting the vox88 Privacy team as described in Section 16, or where the relevant function is available, through your account settings panel.

Requests to exercise any of the above rights should be directed to the vox88 Privacy team using the contact details in Section 16. We will acknowledge your request within 5 business days and provide a substantive response within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. Identity verification may be required before a request is actioned, to protect against unauthorised access to or erasure of your personal data.

vox88 sends promotional emails and notifications (including bonus offers, game announcements, and seasonal promotions relating to events such as Idul Fitri, Ramadhan, and BRI Liga 1 match weeks) only to members who have explicitly opted in to receive such communications during registration or via their account communication preferences.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link present in any marketing email from vox88.
• Updating your communication preferences in the notification settings section of your vox88 account.
• Contacting vox88 support via live chat and requesting to be removed from all marketing lists.

Withdrawal of consent for marketing communications does not affect the delivery of transactional notifications, which are sent as part of the service (such as deposit confirmations, withdrawal updates, KYC request notices, and security alerts). Transactional notifications are sent on the basis of performance of contract and cannot be disabled while your account is active.

The vox88 platform is intended exclusively for adults aged 21 years and over. vox88 does not knowingly collect or process personal data belonging to individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If vox88 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately and the associated account will be closed. If you believe that vox88 may have inadvertently collected data from a person under 21, please contact us immediately using the details in Section 16.

The vox88 platform does not contain links to third-party websites for general browsing purposes. Where references to third-party services (such as payment providers or game studios) appear on the platform, those references are for informational purposes within the context of the vox88 service.

If you independently navigate to any third-party website or service, including the websites of payment providers such as BCA, BRI, BNI, Mandiri, OVO, or DANA, you do so at your own risk and subject to that third party's own privacy policy. vox88 accepts no responsibility or liability for the privacy practices of any third party.

vox88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material — meaning they substantively affect how your personal data is used or your rights in relation to it — vox88 will notify registered members via email at least 14 days before the revised Policy takes effect.

Non-material changes (such as clarifications, corrections of typographical errors, or structural reorganisation that does not affect the substance of the Policy) may be made without advance notice. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Your continued use of the vox88 platform after a revised Policy takes effect constitutes your acceptance of the revised Policy. If you do not agree with the changes, you may close your account in accordance with the procedure described in the vox88 Terms & Conditions prior to the effective date of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about the way vox88 processes your personal data, please contact the vox88 Privacy team through any of the following channels:

vox88 is committed to resolving all privacy-related queries and complaints promptly and fairly. If you are not satisfied with our response to your complaint, you may escalate the matter to the relevant data protection authority or dispute resolution body in accordance with the process described in the vox88 Terms & Conditions.